Simple Login Project using Stored Procedures in ASP.NET: Part - 2


Introduction


Continue from "Simple Login Project using Stored Procedures in ASP.NET: Part 1", now in this post we will look at the stored procedures and forms.

CheckUser Stored Procedure Code

ALTER PROCEDURE CheckUser
       /*
       (
       @parameter1 int = 5,
       @parameter2 datatype OUTPUT
       )
       */
       @username as varchar(50),
       @password as varchar(50)
AS
       /* SET NOCOUNT ON */
       SELECT FROM MyTb WHERE username=@username AND password=@password
       RETURN

In above code, stored procedure is asking for username and password value and returning the total matched records.

CheckUsernameExistance Stored Procedure Code

ALTER PROCEDURE CheckUsernameExistance
       /*
       (
       @parameter1 int = 5,
       @parameter2 datatype OUTPUT
       )
       */
       @username as varchar(50)
AS
       /* SET NOCOUNT ON */
       SELECT FROM myTb WHERE username=@username
       RETURN

In above code, stored procedure is asking for username value and returning the total matched records.

CreateNewUser Stored Procedure Code

ALTER PROCEDURE CreateNewUser
       /*
       (
       @parameter1 int = 5,
       @parameter2 datatype OUTPUT
       )
       */
       @fullname as varchar(50),
       @username as varchar(50),
       @password as varchar(50),
       @emailid as varchar(50)
AS
       /* SET NOCOUNT ON */
       INSERT INTO myTb (fullname, username, password, emailid) VALUES (@fullname, @username, @password, @emailid)
       /*SELECT * FROM MyTb WHERE username=@username AND password=@password*/
       RETURN

In above code, stored procedure is asking for four values and inserting the data in database and returning its state.

That’s all about the stored procedures we are using in this project. Now, let’s look at login and create new user forms.

Login.aspx.cs Code

using System;
using System.Data;
using System.Configuration;
using System.Collections;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Data.SqlClient;
public partial class Login : System.Web.UI.Page
{
    protected void Page_Load(object sender, EventArgs e)
    {
    }
    protected void log_Click(object sender, EventArgs e)
    {
        try
        {
            SqlConnection con = new SqlConnection(GetConnectionString());
            con.Open();
            SqlCommand cmd = new SqlCommand("CheckUser", con);
            cmd.CommandType = CommandType.StoredProcedure;
            SqlParameter p1 = new SqlParameter("username", username.Text);
            SqlParameter p2 = new SqlParameter("password", password.Text);
            cmd.Parameters.Add(p1);
            cmd.Parameters.Add(p2);
            SqlDataReader rd = cmd.ExecuteReader();
            if(rd.HasRows)
            {
                rd.Read();
                lblinfo.Text = "You are Authorized.";
                FormsAuthentication.RedirectFromLoginPage(username.Text, true);
                Response.Redirect("securepage/SecurePage.aspx");
            }
            else
            {
                lblinfo.Text = "Invalid username or password.";
            }
        }
        catch
        {
        }
        finally
        {
       
        }
    }
    public string GetConnectionString()
    {
        return System.Configuration.ConfigurationManager.ConnectionStrings["myDbConnectionString1"].ConnectionString;
    }
}

Look at the above code, this is using stored procedure to login the website.

CreateUser.aspx.cs Code

using System;
using System.Data;
using System.Configuration;
using System.Data.SqlClient;
using System.ComponentModel;
using System.Collections;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
public partial class CreateUser : System.Web.UI.Page
{
    protected void Page_Load(object sender, EventArgs e)
    {
    }
    public string GetConnectionString()
    {
        return System.Configuration.ConfigurationManager.ConnectionStrings["myDbConnectionString1"].ConnectionString;
    }
    private void execution(string fullname, string username, string password, string emailid)
    {
            SqlConnection con = new SqlConnection(GetConnectionString());
            con.Open();
            SqlCommand cmd = new SqlCommand("CreateNewUser", con);
            cmd.CommandType = CommandType.StoredProcedure;
            SqlParameter p1 = new SqlParameter("fullname",fullname);
            SqlParameter p2 = new SqlParameter("username", username);
            SqlParameter p3 = new SqlParameter("password", password);
            SqlParameter p4 = new SqlParameter("emailid", emailid);
            cmd.Parameters.Add(p1);
            cmd.Parameters.Add(p2);
            cmd.Parameters.Add(p3);
            cmd.Parameters.Add(p4);
            SqlDataReader rd = cmd.ExecuteReader();
            if (rd.HasRows)
            {
                rd.Read();
                lblinfo.Text = "User Created";
            }
            else
            {
                lblinfo.Text = "User Not Created";
            }
    }
    protected void create_Click(object sender, EventArgs e)
    {
        //check username is exist or not
        SqlConnection con = new SqlConnection(GetConnectionString());
        con.Open();
        SqlCommand cmd = new SqlCommand("CheckUsernameExistance", con);
        cmd.CommandType = CommandType.StoredProcedure;
        SqlParameter p1 = new SqlParameter("username", username.Text);
        cmd.Parameters.Add(p1);
        SqlDataReader rd = cmd.ExecuteReader();
        if (rd.HasRows)
        {
            rd.Read();
            this.lblinfo.ForeColor = System.Drawing.Color.Red;
            this.lblinfo.Text = "The user already Exist!";
        }
        else
        {
            //section for username not exist
            execution(fullname.Text, username.Text, password.Text, emailid.Text);
            this.lblinfo.Text = "New User Profile has been created you can login now";
            this.fullname.Text = "";
            this.username.Text = "";
            this.password.Text = "";
            this.emailid.Text = "";
        }
    }
}

Look at the above code, this is using stored procedure to create new user for website.

Download the attachment and test it yourself.

Comments

Popular posts from this blog

Customize User's Profile in ASP.NET Identity System

Lambda two tables and three tables inner join code samples